#include <wdm.h>
//卸载派遣函数
void DriverUnload(PDRIVER_OBJECT pdriver)
{
NTSTATUS status = STATUS_SUCCESS;
DbgPrint("Driver Unload!");
}
//驱动加载入口
NTSTATUS DriverEntry(PDRIVER_OBJECT pdriver, PUNICODE_STRING path)
{
DbgPrint("Hello Driver!!");
NTSTATUS status = STATUS_SUCCESS;
HANDLE keyHandle = NULL;
OBJECT_ATTRIBUTES object = {0};
InitializeObjectAttributes(&object,path,OBJ_CASE_INSENSITIVE|OBJ_KERNEL_HANDLE,NULL,NULL);
//openkey creatkey
//ZwOpenKey ZwCreatKey
//创建注册表
ULONG keyop = 0;
status = ZwCreateKey(&keyHandle,KEY_ALL_ACCESS,&object,0,NULL,REG_OPTION_NON_VOLATILE,&keyop);
if (!NT_SUCCESS(status))
{
if (keyop == REG_CREATED_NEW_KEY)
{
DbgPrint("you creat new key");
}
else
{
}
}
//读注册表
PVOID keyInfo = NULL;
status = ZwOpenKey(&keyHandle,KEY_ALL_ACCESS,&object);
if (status == STATUS_SUCCESS)
{
keyInfo = ExAllocatePool(NonP
WDK驱动开发之路——对注册表进行操作
最新推荐文章于 2024-07-09 22:37:42 发布